Impermax Hack

TOTAL LOST $9.0M
Medium Access Control Attacks ethereum polygon

What happened

The hacker managed to steal the private keys of the Impermax team. Despite the fact that the Impermax team took measures, the hacker still managed to escape with some of the money.

Impermax is a DeFi platform for unlocking the value of LP tokens.

The hacker stole the funds, but did not sell them immediately. The stolen amount is enough to dump the token price to about 0. The team decided to make a frontrun attack by dumping a huge amount of tokens before the hacker does it.

The team plans to make a recovery process, during which a new $IMX token will be made, which will be sent to all holders of the old token.

Scammer addresses:

ETH

- Scammer address (A): https://etherscan.io/address/0x64e5ac2e…d5bf24

Scammer address (B): https://etherscan.io/address/0x1d2677ed…d1fb1b

Polygon:

- Scammer address (B): https://polygonscan.com/address/0x8e430d83…2daac2

Case & protocol details

Classification Borrowing and Lending / Key Compromise
Protocol Type Lending
Affected asset / contract IMX
Smart Contract Language Solidity
Official Website www.impermax.finance/
Protocol Twitter/X @ImpermaxFinance

Security review history

Evidence & learning

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.